Privacy policy

Who is responsible for your data?

[TO BE COMPLETED: publisher's company name] is the controller of professional account data (managers and staff of establishments).

For the data of an establishment's customers (orders, contact details, debts, loyalty), the establishment is the controller; Bongo Space processes it on its behalf, as a processor, following its instructions.

Data we process

Accounts: first name, last name, phone number, password (stored only in irreversibly encrypted form), role, establishment.

Establishments: name, type, address, city, phone, photo, settings and subscription.

Activity: orders, sales, payments (amount, method: cash, Orange Money or MTN MoMo; for mobile money, transaction number and photo of the proof), stock, purchases, expenses, inventories.

Customers of establishments: name, phone, consent to messages, debts and repayments, loyalty points, reviews, reservations, delivery address.

Technical and security logs: IP address, date and type of sensitive actions (sign-in, cancellation, payment…).

On your device: a copy of the data needed to work offline (browser local storage).

Why (purposes and legal bases)

Providing the service (checkout, orders, stock, online ordering, delivery): performance of the contract.

Verifying your phone number (code sent by WhatsApp or SMS) and securing accounts: performance of the contract and legitimate interest.

Keeping accounts and meeting legal obligations: legal obligation.

Sending customers messages from the establishment (receipts, reminders, loyalty): customer consent, collected by the establishment.

Recipients and processors

Your data is never sold. It is accessible to the establishment's authorized staff, according to their role, and to the Bongo Space team for support and maintenance.

Technical providers: Netlify (website), [TO BE COMPLETED: server host] (application server), MongoDB Atlas (database), WhatsApp (sending verification codes), Twilio (backup SMS, if enabled).

Some providers are located outside Cameroon, including in the United States. [TO BE COMPLETED: safeguards for these transfers].

Retention periods

Accounts and establishment data: for the duration of the subscription, then [TO BE COMPLETED: period] after it ends. If a subscription expires, data is kept so that service can resume.

Accounting records (sales, payments): [TO BE COMPLETED: applicable legal period].

Security logs: [TO BE COMPLETED: period].

Verification codes: 10 minutes at most; sending queue: 1 hour at most.

Security

Encrypted connections (HTTPS), irreversibly encrypted passwords, role-based access, separation of each establishment's data, encrypted backups, log of sensitive actions.

Cookies and local storage

Bongo Space uses no advertising and no audience measurement tools.

Only strictly necessary cookies are set: session cookies (sign-in), not accessible to scripts, and the remembered language.

Your browser's local storage is used for offline mode and for the installed app (PWA). It is cleared on sign-out or through your browser settings.

Your rights

You can request access to your data, its correction, deletion or portability, and object to certain processing, by writing to [TO BE COMPLETED: contact e-mail address]. If you are a customer of an establishment, contact it first: we will help it respond.

You may also contact the authority responsible for personal data protection: [TO BE COMPLETED: authority and applicable law in Cameroon].

Minors

The service is intended for businesses. Establishments must not record data about minors without the consent of their legal guardian.